CVE-2001-1412

nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument...

CVE-2001-1411

Format string vulnerability in gm4 aka m4 on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs...

CVE-2001-1412

nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument...

CVE-2001-1412

CVE-2001-1412 affects MacOS X before 10.3 via the nidump utility. Local users can read the encrypted passwords from the password file by supplying passwd as a command line argument, indicating a failure in input handling and access control for that utility. The vulnerability’s impact is limited t...

CVE-2001-1410

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering...

CVE-2001-1409

Vulnerability CVE-2001-1409 affects XFree86 Xserver 4.1.0-2 where dexconf creates /dev/dri with insecure permissions (666). This allows local users to replace or create files on the root filesystem. Red Hat advisories RHSA-2003:064/065/067 reference updated XFree86 packages and fixes; the issue i...

CVE-2001-1409

dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions 666, which allows local users to replace or create files in the root file system...

CVE-2002-0719

CVE-2002-0719 is a SQL injection vulnerability in Microsoft Content Management Server (MCMS) 2001, affecting the function that services MCMS image/file requests. It allows remote attackers to execute arbitrary commands via crafted resource requests. Exploitation details indicate network-based acc...

CVE-2001-0748

CVE-2001-0748 concerns Acme.Serve 1.7, used in Cisco Secure ACS Unix and possibly other products. The vulnerability is a directory traversal that lets remote attackers read arbitrary files by prepending several / (slash) characters to the URI. The issue stems from Acme.Serve’s embedded web server...

CVE-2001-0873

The CVE-2001-0873 issue affects Taylor UUCP’s uuxqt, where long command-line options are not properly filtered, enabling a local user to gain privileges by invoking uux with a malicious --config file. Public documents confirm the vulnerability primarily as a local-exploit in uuxqt, with Debian (u...

CVE-2001-0959

The CVE-2001-0959 entry concerns Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0, which create a hidden administrative share named ARCSERVE$. This behavior enables remote attackers to access sensitive information and to overwrite critical files. The vulnerability is described ...

CVE-2001-0960

ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 store the backup agent username and password in cleartext in the aremote.dmp file on the ARCSERVE$ hidden share. The Nessus plugin item ARCSERVE_HIDDEN_SHARE.NASL confirms the ARCSERVE$ share is accessible and that multiple ARCserve versions retain ...

CVE-2001-1028

CVE-2001-1028 describes a buffer overflow in the ultimate_source() function of the man package (versions 1.5 and earlier), enabling local privilege escalation. Connected documents confirm the root cause is a buffer overflow, with the Red Hat advisory RHSA-2001:072 noting local GID man exploits an...

CVE-2001-1036

The connected records show a concrete vulnerability in GNU findutils locate prior to version 4.2.31. The flaw is a heap-based buffer overflow in the visit_old_format function (locate/locate.c) that can be triggered by a long pathname stored in a locate database using the old format, potentially a...

CVE-2001-1059

VMware creates a temporary file vmware-log.USERNAME with insecure permissions, enabling local users to read or modify license information. This CVE (CVE-2001-1059) is rated Low (CVSSv2 base 3.6) with local attack vector and no remote access. The connected documents reiterate the same issue but pr...

CVE-2001-1145

The CVE-2001-1145 entry concerns fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier. The issue allows the current working directory to be changed (via chdir) into a different directory than intended when the directory above the current directory is moved, wh...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

CVE-2001-1296

Technical details about CVE-2001-1296 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1303

The CVE-2001-1303 entry describes an information-disclosure vulnerability in Check Point Firewall-1 where SecuRemote’s default configuration allows remote attackers to obtain sensitive configuration information for the protected network without authentication. Affected component: SecuRemote (part...

CVE-2001-1327

CVE-2001-1327 affects pmake prior to 2.1.35 installed on Turbolinux 6.05 and earlier. The issue arises because pmake is installed with setuid root privileges, enabling local users to gain privileges by exploiting vulnerabilities in pmake or programs used by pmake. The NVD lists a base CVSS2 score...